
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
File: Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft (raw, json)
Hash identifier: r1bC0lIwsF68mxGrgOAp+oVlpPpC8ALRKDYIY+UI2sU=
Subject key identifier: 36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0E45
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
Manifest number: 0E20
Signing time: Sun 10 May 2026 11:08:07 +0000
Manifest this update: Sun 10 May 2026 11:08:07 +0000
Manifest next update: Tue 12 May 2026 11:08:07 +0000
Files and hashes: 1: 1NvRIIgsw36jv1JPruOnfe6B5l0.roa (hash: wr3wO5pomnNqcHXEV81x9pHMfpgLRKocC+eB8odzGOM=)
2: Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl (hash: 8w8/ObLhIZh4KT38w8NG8507jw1Cn7YaniIV014wwpI=)
3: G-5dGJndFPFIremaQBKGeQKwP8Q.roa (hash: B+r3PMQY8uNMEqm8kK8RjU1199TgiLGEM15rS1U0OGg=)
4: Htxl_uoKAitIQFAJGQAgxPhPNvk.roa (hash: 4PmV98CZgMZWAzeosi+ZZUuYXqKRNzTjh9rXffo9sH0=)
5: I7qwI1gfHdruaMYPjd4UjAzM860.roa (hash: KoRXGMrjBVfQWe2i4f9nTPNoh8jjf6pAhx14M5muY60=)
6: KKgUhz5JbyNufz1xuD3J3xbebvs.roa (hash: kbZEbvVI6dBggqmORJ0fOYZHz3Cqdm34XYO3IXze8kI=)
7: UFlnU4ikGwoLgzaep6hE8NmifZw.roa (hash: y5mFasOvnGkNoWDCHh8uVuNT8BOc9XOeXztFBTtKPKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: May 10 11:08:07 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=3620F5F391F2D3F876E92D338CF436A3F96A536C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:59:0a:c7:b0:89:f4:cf:cc:dd:4a:80:17:
b7:2e:96:a6:db:53:a3:d3:64:73:82:a5:ab:fa:b1:
0c:d9:2a:a0:72:ae:41:98:81:ef:b3:34:f5:6f:dd:
25:6a:17:50:15:8e:df:50:28:a1:7b:e7:58:84:2f:
92:6c:eb:91:8b:b8:d3:50:30:09:14:8e:93:b7:ff:
9a:be:d2:55:ec:0b:c4:c7:de:92:9a:5d:23:48:69:
44:6b:31:aa:1f:32:6f:5e:68:ed:18:bc:bd:33:fb:
6a:02:4b:a3:fd:e1:4e:50:5a:0f:9a:3f:37:48:71:
b3:e0:40:aa:4e:37:78:c9:69:c5:c2:90:09:3b:53:
53:d4:f8:8b:eb:e7:eb:60:4c:ce:ae:c1:21:99:d4:
c9:e0:17:ab:7e:81:e5:81:35:2f:41:10:07:d7:a8:
f6:ca:b2:d1:9b:22:36:e4:82:05:f2:0f:20:97:d4:
34:91:51:82:ca:cf:bd:83:a8:e3:30:4a:58:cc:ac:
02:fb:ac:26:d5:e4:3e:3e:25:a5:af:92:de:cc:3e:
a3:49:ea:29:15:d8:07:f0:39:2b:3d:39:c9:e3:c9:
14:c7:2a:27:29:e5:23:6e:d1:a2:45:be:13:22:e7:
2e:d1:b5:18:da:94:0f:c0:b6:a1:9a:74:70:3a:1e:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:38:70:cb:9f:ef:12:7e:17:68:51:58:fc:d3:0f:ec:0b:94:
24:3c:3a:cb:72:ab:70:61:39:6c:80:86:d1:32:a5:2f:4e:fc:
df:9e:83:c0:a1:ca:98:52:66:70:34:cc:7e:42:97:ae:a2:b6:
60:71:1a:3f:df:ff:f4:ad:fe:62:6c:63:7d:6f:20:f3:25:53:
c3:b5:92:95:a5:fd:7c:7e:c1:0b:6c:82:64:f1:9d:df:0c:9b:
a9:c7:24:c8:03:6f:92:53:9d:ae:b2:8c:ce:59:2e:92:03:fc:
af:06:2a:49:57:70:85:e9:53:47:41:95:92:2c:00:bb:dd:30:
70:f2:e8:40:10:af:6f:13:5f:bc:c9:28:e1:06:7f:30:9b:76:
fe:00:2d:ed:d3:9a:68:7f:39:15:67:de:d8:1f:f7:2a:42:25:
b3:a6:95:71:57:34:03:84:b0:19:eb:61:d7:87:78:0e:a0:60:
2a:0a:c8:a5:ec:65:23:d5:5d:bf:b9:6b:b7:29:0f:14:02:f5:
6e:2a:19:dc:df:4b:aa:7b:3b:93:0f:82:b1:f3:43:fb:31:7d:
cc:7f:e0:f6:26:fb:96:29:b3:03:13:fe:c7:8d:08:1f:90:8e:
5e:90:89:5e:9d:31:d1:4c:9e:dc:5b:bd:df:2d:03:ce:af:10:
0c:ea:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:25:30 2026 by rpki-client